Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 26 subscribers
  • Views 891 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Not able to delete an email in mailspool wich causes mailscanner process to use 25% CPU performance (one complete CPU Core)

André Kufner

Hello world,

does anyone has an idea how to delete an email via shell?

Since 19.11.2020 I have got an email in mailspool and I am not able to delete it. I tried it by:

  • Delete Button in the webconsole (Protect/Email/Mail spool)
  • Reboot the Firewall (twice)

However, the email is broken and it hangs with the mailscanner process. This mailscanner process consumes all resources from one CPU core. We have 4 cores, so that at night (when nobody is working) XG Firewall CPU shows more than 25%.

Furthermore, when reinitializing smtpd service, I see that reconfiguration of this corrupt mailscanner process fails. (in smtpd_main.log)

I already opened a support case (ID 03499893) on 4.1.2021 but it is still under investigation.

Has anyone an idea how to solve thist issue?



This thread was automatically locked due to age.
Parents
  • +1

    Hello Andre,

    Thank you for contacting the Sophos Community!

    I have left a note in the case and alerted the manager of the owner of the case.

    This should be possible to achieve but steps need to be done by support as it involves the database.

    Regards,

  • 0 in reply to emmosophos

    Hi Emmanuel,

    thanks so much. After you alerted the manager of the owner of the case, Sophos Technical Support has contacted me. They have been able to delete the broken email. Unfortunately, we still have high CPU utilization due to one mailscanner process. Sophos Technical Support wanted to analyse the logs by support access. After 2 days, I got this answer:

    "We are unable to collect the required information from the access id provided. 
    I will be available from February 10 after a short leave. "

    Now I have to wait another 5 days... 

  • 0 in reply to André Kufner

    Hello Andre,

    Thank you for the follow-up.

    I don't see that email in this case, the last activity was on Feb 3 saying they will be monitoring the case.

    In any case, I have pinged the engineer assigned to the case. I see also GES left a note about the monitoring yesterday.

    Please double check that the email you mentioned corresponds to this case. (03499893).

    Regards,

Reply
  • 0 in reply to André Kufner

    Hello Andre,

    Thank you for the follow-up.

    I don't see that email in this case, the last activity was on Feb 3 saying they will be monitoring the case.

    In any case, I have pinged the engineer assigned to the case. I see also GES left a note about the monitoring yesterday.

    Please double check that the email you mentioned corresponds to this case. (03499893).

    Regards,

Children